WHAT IS CLAIMED IS: 
A method for generating a code to be embeddecjL 
in a predetermined content, comprising the step^^-^^: 

calculating a plurality of residues ,^t^king 
a plurality of integers which are reLar^vely prime 
to each other, as moduli, with reject to a user 
identification number of a us&r who uses the content; 

generating a plurality of component codes 
respectively expressing/the residues obtained in 
the residue calculating step; and 

concatenating/the component codes generated in 
the component code generating step, thereby to generate 
the code to be/embedded. 

2 . A unit for generating a code to be embedded 
in a predetermined content, comprising: 

residue calculating means for calculating a 
plurality of residues, taking a plurality of integers 
which are relatively prime to each other, as moduli, 
with respect to a user identification number of a user 
who uses the content; 

/component code generating means for generating 
a plurality of component codes respectively expressing 
the presidues obtained by the residue calculating means;^^ 
and 

concatenating means for concatenating the 
comti)onent,.e<?a:es ^le^x^ated by the component code y 
gen/e;i?^ing means, thereby^to generate the code to her 
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3. A unit accp^^driTng to claim 2, wherein the 
component c^jA^ generating means generates, as the 
plurali;ty of component codes, codes each constructed by 
contanuous sequences of 1 andr 0, taking a predetermined 



nSber of bits as 

4 . A method for detecting an embedded code \jhp 
is embedded in a predetermined content and conp^enates 
a plurality of component codes, comprisingxxhe steps 
of: 

dividing the embedded code inp6 the plurality of 
component codes; 

decoding each of the cora|>onent codes divided, 
thereby to obtain a plurality of residues pairs each 
comprising two residues , /taking a plurality of integers 
which are predeterminejJ^^^nd ^^^arre relatively prime to 
each other, as modul. 

calculating a user identification number of a 
colluder who made A collusion attack on the content, 
from the plurality of residue pairs, wherein 

the plurali/ty of component codes are component 
codes that have a possibility to have a method of 
decoding at least one of the residues with respect to 
the user identification number of the colluder. 

5. A )anit for detecting an embedded code which is 
embedded i/i a predetermined content and concatenates 

a plural/ty of component codes, comprising: 
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code dividing means for dividing the embedded cc 
into the plurality of component codes; 

component code decoding means for decoding each 
of the component codes divided, thereby to <2ft>tain 
5 a plurality of residues pairs each comprising two 

residues, taking a plurality of integers which are 
predetermined and are relatively prj^e to each other, 
as moduli; and 

colluder number calculating^ means for calculating 
10 a user identification number o/t a colluder who made 

a collusion attack on the coi;atent, from the plurality 
of residue pairs, wherein 

the plurality of /<5oitiE^qnent /iodes are component 
codes that have a posfeib:^i]fey^o have a method of 
15 decoding at least one o^L-jme residues with respect to 

the user identif icatioiV number of the colluder. 

6. A unit according to claim 5, wherein the 
plurality of component codes are each constructed by 
continuous sequences/ of 1 and 0, taking a predetermined 

20 number of bits as a/unit, 

7, A unit according to claim 5, further 
comprising collusion determining means for determining 
presence or absencye of a collusion from the plurality 
of residue pairs , /wherein the colluder identification 

2 5 number calculatir/g means calculates the user identifi- 

cation number of/ the colluder, if presence of a 
collusion is determined by the colluder determining 
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means. ^---^ — 
8. A unit according to claim 5, whereiijx^€ne 

colluder number calculating means included: 

a residue selecting section f orx^electing one 
5 residue from each of k' inputted/residues pairs, 

thereby to generate a set of residues (Rl/ R2 , 

Rk ' ) ; / 

a Chinese remainder/theorem section for 

calculating a candidate] of a, user identification number 
10 u of a colluder, trcwa ]J residues (SI, S2, Sk) which 

are different from7e5ch other and selected from the set 

of k' residues generated by the residue selecting 

section, in acccSrdance with a Chinese remainder 

theorem; and / 

15 a consistency checking section for selecting the k 

residues frown the set of k' residues generated by the 
residue selecting section, for supplying the k residues 
to the Chi/nese remainder theorem section, for 
specifying a user identification number of the colluder 

2 0 from the /candidate of the user identification number u 

of the cjblluder calculated by the Chinese remainder 
theorem /section, and for outputting the user identifi- 
cation number of the colluder, wherein 

the consistency checking section has selection 

25 processiLng for selecting the k residues from the set of 

k' resiidues generated by the residue selecting section, 
determination processing for determining whether or not 
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a relationship of Ri=u mod pi (i=ii, ±2' ^f) ^^isj 

between the candidate of the user identif icatioja^umber 
u of the colluder calculated by the Chinesp^emainder 
theorem section and a predetermined nuHtber (f.) of 
residues among remaining (k*-k) r§^dues, and output 
processing for outputting the ^p^ndidate as a user 
identification number jzrblluder if the relationship 

exists as a result of (th^/He±;eifmi nation processing, 

if the relationsl>ip^does not exist, a new 
combination of k residues (SI, S2, Sk) is selected 

from the set of tjne k* residues generated by the 
residue selecting section, thereby to carry out the 
determination/processing, and if the relationship does 
not exist with respect to any of all combinations of k 
residues /si, S2, Sk), a new set of k' residues is 

requested! to the residue selecting section, and the 
seleciylon processing and the determination processing 
are ^repeated until the relationship exists* 
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i-ha-h ^ T-o r*n1 nnl-rn i-Jil I ly lng> r^a I r^n I a 4- i n q meanS with 

respect to a predetermined number of user idjerfitif ica- 
tion numbers, k combinations of the k' opponent codes 
can uniquely express the user ident^j/f ication numbers; 
and 

concatenating means for (zbncatenating the 
component codes generated by the component code 
generating means, thereby to generate a code to be 
embedded, wherein 

k' is determined to be c(k+0/<3 or more where c 
is a positive intejger of 3 or more, C is a positive 
integer, and q is a number of the integral elements 
which can be detected from each of the component codes 
when detecting the embedded code. 

10. A i^/hit according to claim 9, wherein, where p± 
(i=l, 2, k* ) is a number of values which each of 

the integral factors calculated by the calculating 
means can take with respect to the predetermined number 
of usei7 identification numbers and where £ is a 
detectaon error rate which is assumed when detecting 
the code to be embedded, k' is determined such that a 
condfl-tion of 
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is/ satisfied. 

11. A unit^.^cordiag^o claim 9, wherein the 
cklculatrllig means calculates a set^--cif^ residues, whigj 
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^■^ xiko a plurality o£ ixiL^ gers relatively prime to ej 
other as moduli, as the set of integral e],jeitfents , in 
correspondence with the inputted us^r^dentif ication 
number. 

12, A unit according claim 9, wherein the 
calculating means calcu]/ates a set of numbers of 
elements, which belong to an equivalence class defined 
by a parallel transformation, as the set of integral 
elements, in cojTrespondence with the inputted user 
identif icatiorst" number, 

13. A i^nit according to claim 9, wherein the 
calculatiiv^ means calculates a set of numbers of 
elements/ which belong to an equivalence class defined 
by a parallel transformation, as the set of integral 
elements, in correspondence with the inputted user 
identification number, and 

where pi (i=l/ 2, k') is one same positive 

integer p, a condition 
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14. A unit for detecting an embedded code, 
comprising; 

code extracting means for ^;s^^^ah^±r\q/3in embedded 
code from a target in which th^lembeiped code is 
embedded, the embedded cpde concsfte^ating component 
codes respectively operated in correspondence with an 
gutted user^^Jr^ntif ication number and also being such 
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that among k* component codes capable of expressing aj 
sets of integral elements that are calculated witl 
respect to a predetermined number of user idenl^^^ica- 
tion numbers, k combinations of the k' component codes 
5 can uniquely express the user identification numbers; 

code dividing means for making a division into 
extracted component codes; 

component code decoding means pbr decoding each of 
the component codes divided; and 
10 colluder number calculating/means for calculating 

a user identification number of/ a colluder from a 
decoding result of each of the component codes, wherein 

k' is determined toy!^epA]<i+C) /q or more where c 
is a positive integer o£ 3 hrlmore^ C is a positive 
15 integer, and q is a number^ offthe integral elements 

which can be detected frdm/each of the component codes 
when detecting the embecTded code. 

15. A unit accordi/ng to claim 14, wherein, where 
Pi (i=l, 2, k') is/ a number of values which each of 

20 the integral factors Calculated by the calculating 

means can take with respect to the predetermined number 
of user identification numbers and where £ is a 
detection error ratfe which is assumed when detecting 
the embedded code,/k' is determined such that a 
2 5 condition of 
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is satisfied. / 

16. A unit according to claim 14, where^ the set 
of integral elements is a set of residues^; which are 
calculated in correspondence with the yser 
identification number and take a plurality of integers 
relatively prime to each other as inoduli. 

17. A unit according to cla/m 14, wherein the set 
of integral elements is a set c/f numbers of elements 
which are calculated in correspondence with the user 
identification number and belong to an equivalence 
class defined by a parallel transformation. 

18. A unit accordirrgTSto claim 14, wherein the set 
of integral elements is a A^to^-^-ifirmbers of elements 
which are calculated in/ correspondence with the user 
identification number a«a belong to an equivalence 
class defined by a parallel transformation, and 

where pi (i=l/ 4^ k') is one same positive 

integer p, a condition of 

2 p + \ 

is further satisfied. 

19. A unit for detecting an embedded code, 
comprising: / 

code extracting means for extracting an embedded 
code from a target in which the embedded code is 
embedded, the embedded code concatenating component 
codes respecti\^ly generated in correspondence with an 
inputted user/identif ication number and also being such 
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that among k' component codes capable of expressinq/all 
sets of integral elements that are calculated wi/th 
respect to a predetermined number of user identifica- 
tion numbers, k combinations of the k* component codes 
can uniquely express the user identif ic^ion numbers; 

code dividing means for making ar division into 
extracted component codes; / 

component code decoding meaj/s for decoding each of 
the component codes divided; ana 

colluder number carfcu!hatyLng means for calculating 
a user identification pumboy. j^f^a colluder from a 
decoding result of eachs^o^the component codes, wherein 

the component code decoding means includes a block 
dividing section for diyiding each of the component 
codes into blocks, a counting section for counting 
a number of bits of "l/" in every one of the blocks, 
a first determining section for determining whether 
or not a count value obtained by the counting section 
exceeds a first threshold value, a second determining 
section for determfl_ning whether or not the count value 
is smaller than a/second threshold value, a minimum 
position selecting section for selecting a minimum 
block determines as exceeding the first threshold 
value by the first determining section, and a maximum 
position selecting section for selecting a maximum 
block determined as being smaller than the second 
threshold va/ue, thereby to output a selection results 
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of the minimum 
as a d,^jGoding result. 
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osition selecting sectionsT" 



comprising user identification number assigrfing means 
for selecting one candidate that is ejp^neously 
detected as the user identif icati£m number of the 
colluder at a smaller possibility, among a plurality of 
user candidate number candidates, in response to an 
assigning request for the user identification number, 
and for assigning thef selected user identification 
number to user specifying data which specifies the 
user . 

21* A uni£ according to claim 20, wherein the 
user identif /cation number assigning means inputs 
sequentialLy the plurality of user identification 
number candidates one after another, determines whether 
the possibility at which each of the candidates is 
erroneously detected as the user identification number 
of the/ colluder is high or low, and assigns a candidate 
to thjfe user specifying data at a time point when a user 
identification number candidate having the possibility 
is determined to be low is inputted. 

22. A unit according to claim 20, wherein the user 
identification number assigning means includes storage 
mepns which stores a plurality of user identification 
nu/mbers having a lower possi bility at which the 
f user identif icationnttfflbers are 
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^iF£Qix© ouDly do Leu Led As the u^er^jLxl^^rtnrtldatl on 
numbers of the cpiixraer, and selects and reads a user 
identif;k<fation number to be assigned to the user 
sp^^fying data from the user ^^iraentif ication numbers 
:ored in the storage means . 

23. A unit according to claim 5, wherein tY^r 
colluder number calculating means generates^^ least 
one user identification number candidate/having a 
possibility to be the user identification number of the 
colluder, from the plurality of residue pairs, selects 
at least one user identification number having a lower 
possibility to be erroneousl^ detected as the user 
identification number of the colluder, among the 
candidate, and decidy^ tha selected user identification 
number as the user ldenyj|sDic^;fed^ number of the 
colluder. Vj'^V^ 

24, A unit accorySing to claim 5, wherein the 
colluder number calculating means sequentially 
generates a pluraliicy of user identification number 
candidates having a possibility to be the user 
identification number of the colluder, from the 
plurality of resiilue pairs, determines whether a 
possibility to be erroneously detected as the user 
identification mumber of the colluder is high or low, 
with respect to the candidates, and decides all of user 
identification numbers that have the possibility 
determined to be low, as user identification numbers of 
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colluders. 

25. A unit according to claim 23, wherei^the 
colluder number calculating means obtains A number of 
those residues among all of the residues pairs that 
satisfy a congruence to the residues /taking the 
plurality of integers as modulus, yith respect to all 
user identification numbers, and/generates a user 
identification number which makes the number to be 

a predetermined threshold value or more, as a user 
identification number candicaate of the colluder. 

26. A unit according fco claim 24, wherein the 
colluder number OBi\o}2A:e^^Xiq means obtains a number of 
those residues among alY pf the residues pairs that 
satisfy a congruence tXtli^x'-^sidues taking the 
plurality of integers /a;/ modulus , with respect to all 
user identification numbers, and generates a user 
identification number which makes the number to be 

a predetermined threshold value or more, as a user 
identification number candidate of the colluder. 

27. A unit according to claim 5, wherein the 
colluder number calculating means includes storage 
means which stores a plurality of user identification 
numbers having a lower possibility at which the 
plurality of user! identification numbers are 
erroneously deteoted as the user identification numbers 
of the colluder ,/ and decides a user identification 
number which co/ncides with at least one user 
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identification number 
be the user identific 




isibility to 
lumber of the colluder^ 



generated from^the plurality of residue pairs, among 
the userv,^raentif ication numbers stored in the storage 
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A watermark embeddiag^-ninltr tor emi^edding 
a code to-^^^^embedded, which is generated by the unit 
acoferding to claim 2, as watermark information into the 

29. A watermark embedding unit for embedding 
watermark information containing inf ormatiop^f a user 
identification number into a predetermii>^ content, 
comprising : 

means for outputting one codeword selected from 
a plurality of codewords constructing a simplex code, 
in correspondence with aj^— i^p;atted user identification 
number ; and 

means for embeddi\fig /h^ outputted codeword as the 
watermark information into the content as an embedding 
target . 

30, A watermark /ietecting unit for detecting 
watermark informatiori containing information of a user 
identification number from a predetermined content, 
comprising : 

means for oiitputting one codeword selected from 
a plurality of codewords constructing a simplex code, 
in correspondefnce with an inputted user identification 
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number ; 

means for obtaining a correlation valup^etween 
the outputted codeword and the content; >^nd 

means for determining presence x5r absence of a 
codeword corresponding to the inp;kitted user identifica- 
tion number in the content, ba^^d on the correlation 
value . 

31. A watermark detect/ing unit for detecting 
watermark inf ormation^^^eojvcaining information of a user 
identification numbfer f//^m a predetermined content, 
comprising ; 

means for outpuZ^cing a plurality of codewords 
which respectively ycorrespond to a plurality of 
previously registered user identification numbers and 
which construct A simplex code; 

means for /obtaining a correlation value between 
each of the outputted codewords and the content; and 

means ^or determining presence or absence of 
watermark ynformation, based on norm calculated, 
regarding /each obtained correlation value as a vector, 
and for specifying a colluder based on the correlation 
value if/ presence of watermark information is 
determi/ied. 

TZZ Ast^rage^jnedj^m-Ji<^^^ in — 

>whicjr^ code to be embedded, which is generated by the 




